101 · Question #45
A BIG-IP has a virtual server at 150.150.10.10:80 with SNAT automap configured. This BIG-IP also has a SNAT at 150.150.10.11 set for a source address range of 200.200.1.0 / 255.255.255.0. All other…
The correct answer is C. Floating self IP address on VLAN where the packet leaves the system. When a virtual server has SNAT automap configured, it takes precedence over any standalone SNAT object, translating the source IP to the floating self IP on the egress VLAN.
Question
A BIG-IP has a virtual server at 150.150.10.10:80 with SNAT automap configured. This BIG-IP also has a SNAT at 150.150.10.11 set for a source address range of 200.200.1.0 / 255.255.255.0. All other settings are at their default states. If a client with the IP address 200.200.1.1 sends a request to the virtual server, what is the source IP address when the associated packet is sent to the pool member.
Options
- A200.200.1.1
- B150.150.10.11
- CFloating self IP address on VLAN where the packet leaves the system
- DFloating self IP address on VLAN where the packet arrives on the system
How the community answered
(49 responses)- A6% (3)
- B24% (12)
- C57% (28)
- D12% (6)
Why each option
When a virtual server has SNAT automap configured, it takes precedence over any standalone SNAT object, translating the source IP to the floating self IP on the egress VLAN.
The original client IP 200.200.1.1 is not preserved because SNAT automap is explicitly configured on the virtual server, which translates the source address before forwarding to the pool member.
The standalone SNAT address 150.150.10.11 does not apply here because traffic handled by a virtual server uses that virtual server's SNAT configuration, overriding any matching standalone SNAT object.
SNAT automap on a virtual server maps the client source IP to the floating self IP on the VLAN through which the translated packet exits toward the pool member. Because the traffic matches the virtual server at 150.150.10.10:80, the virtual server's own SNAT automap setting takes precedence over the standalone SNAT object configured for the 200.200.1.0/24 range, so 150.150.10.11 is never used.
SNAT automap uses the floating self IP on the egress (outbound) VLAN where the packet leaves the system toward the server, not the ingress VLAN where the client packet arrived.
Concept tested: F5 BIG-IP SNAT automap precedence over standalone SNAT
Source: https://support.f5.com/csp/article/K7820
Topics
Community Discussion
No community discussion yet for this question.